Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e026d4-5ef0-3bd5-b3e8-775450c48ded.roa
File:                     16e026d4-5ef0-3bd5-b3e8-775450c48ded.roa (raw, json)
Hash identifier:          L6vO+Hjs+Ai+nCsDDdqtImN+wYuL/5qkUuH8ATdDoIM=
Subject key identifier:   D5:02:A2:3A:44:97:F7:D9:F9:D9:41:C2:50:A2:72:F4:78:19:4A:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A69D221C467A96B1B840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e026d4-5ef0-3bd5-b3e8-775450c48ded.roa
Signing time:             Tue 10 Mar 2026 14:28:41 +0000
ROA not before:           Tue 10 Mar 2026 14:28:41 +0000
ROA not after:            Mon 08 Jun 2026 14:28:41 +0000
asID:                     396541
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a6:9d:22:1c:46:7a:96:b1:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:41 2026 GMT
            Not After : Jun  8 14:28:41 2026 GMT
        Subject: CN=8aeedba3-0a69-4654-8781-38e115925ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:f4:0c:ff:4c:57:e3:f8:a9:58:26:b4:2d:
                    89:68:c1:bd:da:16:cc:fa:ff:f3:7f:31:40:3d:2c:
                    21:59:b7:e5:ef:32:96:db:12:4f:b9:23:53:81:2b:
                    a7:09:74:10:d6:33:6f:4d:dd:54:2b:c9:2e:9f:19:
                    2c:27:55:26:76:67:58:52:eb:58:a8:33:d6:fc:ca:
                    6e:12:86:0c:b9:23:a6:6a:0a:55:b0:8e:e3:a8:5a:
                    a6:c7:40:a3:0e:a7:64:28:08:6d:df:1b:61:ad:20:
                    1a:a5:da:57:32:c8:05:bd:09:bd:27:30:2b:68:6b:
                    be:00:9f:86:d5:7b:ad:d4:11:8c:df:7f:39:fe:d3:
                    e0:f7:1c:b3:bf:d9:2d:8c:b2:51:88:a1:54:e5:8b:
                    38:36:5e:67:7b:36:53:3a:57:f5:06:77:1b:ff:00:
                    50:13:ec:f7:f4:6a:57:a9:c0:7d:bd:31:7a:0e:7f:
                    b9:f6:00:26:58:17:f0:a3:e8:cd:c2:83:82:90:2a:
                    94:52:3b:6f:f9:e4:fb:1d:ef:48:5f:66:77:fc:8e:
                    1b:2a:62:11:6b:d6:f1:6b:1b:f1:e6:83:da:d3:18:
                    6e:62:a2:b7:99:b6:e3:8b:4e:82:33:f3:36:c5:1b:
                    33:89:56:5b:82:df:12:a5:40:15:12:40:c3:d7:ef:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:02:A2:3A:44:97:F7:D9:F9:D9:41:C2:50:A2:72:F4:78:19:4A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16e026d4-5ef0-3bd5-b3e8-775450c48ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:64:94:d7:2f:cf:cd:e6:ee:8c:3b:73:7d:c2:56:70:84:82:
         d9:dd:74:c1:36:93:5c:fe:9b:fa:d0:cd:53:cc:d7:2e:eb:dc:
         34:ea:23:de:15:ad:62:ea:66:bc:3c:a9:8e:40:72:76:a5:5b:
         c6:db:1a:44:a1:9d:3e:3d:dd:c1:f7:b2:0d:05:24:d7:fb:6d:
         23:1a:68:9a:49:25:53:3d:56:d5:df:b9:57:eb:b4:d1:f1:ad:
         5f:38:39:4c:f6:9f:0a:61:84:7f:ba:44:70:7b:c1:58:b3:94:
         09:aa:ee:a5:6d:d8:03:6d:58:28:49:9a:00:cd:e3:b7:d1:a0:
         db:02:fb:17:69:1b:8a:f4:fc:53:22:0d:d9:a8:ef:f3:b7:56:
         94:da:1a:aa:67:eb:17:b7:15:da:ce:fb:c7:d0:b4:f6:f5:7c:
         84:97:e1:8e:44:f8:7a:15:48:2a:5e:dc:6d:96:85:2d:7f:d6:
         e6:a9:44:10:fe:4e:79:9b:84:2c:07:87:1f:97:63:39:2b:9e:
         cd:d0:e3:f2:10:f9:8f:30:48:2e:3f:31:7e:aa:8e:20:4b:f6:
         73:94:11:60:b2:4f:23:9c:0d:06:a7:36:4c:56:2e:b9:b6:96:
         6d:14:a1:0f:ad:d6:89:5b:fb:2b:c7:3b:a5:87:2c:7c:5f:58:
         80:85:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:30 2026 by rpki-client